Ankitects Anki 24.04 Release Candidate 3

CPE Details

Ankitects Anki 24.04 Release Candidate 3
ankitects
anki
24.04
2024-12-27
15h52 +00:00
2024-12-27
15h52 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:ankitects:anki:24.04:rc3:*:*:*:*:*:*

Informations

Vendor

ankitects

Product

anki

Version

24.04

Update

rc3

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2024-32152 2024-07-22 14h20 +00:00 A blocklist bypass vulnerability exists in the LaTeX functionality of Ankitects Anki 24.04. A specially crafted malicious flashcard can lead to an arbitrary file creation at a fixed path. An attacker can share a malicious flashcard to trigger this vulnerability.
4.3
Moyen
CVE-2024-32484 2024-07-22 14h20 +00:00 An reflected XSS vulnerability exists in the handling of invalid paths in the Flask server in Ankitects Anki 24.04. A specially crafted flashcard can lead to JavaScript code execution and result in an arbitrary file read. An attacker can share a malicious flashcard to trigger this vulnerability.
8.2
Haute